Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_Ds7TDE8hLyw0EspRNkaUxsZd5c.roa
File: _Ds7TDE8hLyw0EspRNkaUxsZd5c.roa (raw, json)
Hash identifier: SHUKXh04fJnHdZXT19WICwO6FyHH1zNQoOwJVEM19g8=
Subject key identifier: FC:3B:3B:4C:31:3C:84:BC:B0:D0:4B:29:44:D9:1A:53:1B:19:77:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186115D01944DABAF6CCCF075B17E107120
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_Ds7TDE8hLyw0EspRNkaUxsZd5c.roa
Signing time: Thu 02 Feb 2023 09:02:33 +0000
ROA not before: Thu 02 Feb 2023 09:02:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53358
IP address blocks: 2a0e:97c4:138::/46 maxlen: 48
2a0e:97c4:130::/45 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:5d:01:94:4d:ab:af:6c:cc:f0:75:b1:7e:10:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 2 09:02:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc3b3b4c313c84bcb0d04b2944d91a531b197797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:f7:d0:11:9a:b4:fe:bf:87:8a:47:06:85:
5f:9f:f5:1f:1b:b5:90:cc:b3:61:16:a3:e4:3c:ff:
74:d1:91:db:1f:6f:23:05:8a:27:92:97:c4:52:8b:
a5:28:74:2c:2d:33:e1:2e:d7:bd:27:cc:cc:a4:c0:
1d:67:32:b4:37:6d:c2:b1:15:76:7c:3d:bd:4e:8f:
4c:46:c4:d1:7a:6e:20:a2:70:e3:2f:5f:12:fd:28:
7b:99:85:eb:2c:ee:ff:95:fa:34:6e:d3:f9:9d:76:
b7:2c:50:a9:13:4a:83:40:99:64:1d:17:de:03:51:
2f:d3:fb:ff:9f:51:6b:67:60:7f:64:f3:11:36:b2:
58:b7:10:ae:ff:50:ac:b0:20:6e:a7:cd:25:35:5b:
b2:96:e8:74:9c:b6:2b:49:e0:17:0a:f7:06:c4:2f:
96:f1:45:a0:41:23:c7:b0:26:0e:e3:a6:ca:ce:2a:
f7:b4:65:93:cc:07:9c:ac:5d:37:4d:2f:80:d9:22:
46:91:64:0d:c9:65:65:ff:2f:07:96:47:c0:80:e8:
16:07:5b:3f:b5:a1:9b:91:0c:3c:8b:eb:57:5f:d4:
61:e9:de:6a:af:84:14:1a:5f:42:95:62:d7:6f:28:
c1:39:37:78:c7:0d:43:09:06:e6:0c:83:95:4b:db:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:3B:4C:31:3C:84:BC:B0:D0:4B:29:44:D9:1A:53:1B:19:77:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_Ds7TDE8hLyw0EspRNkaUxsZd5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c4:130::-2a0e:97c4:13b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:f5:f4:ff:f6:e1:b6:bc:e3:5d:26:72:a6:59:60:31:9c:8a:
92:b9:39:32:cc:09:25:be:4c:14:07:6d:cd:3a:a4:80:28:89:
9a:f7:bc:5e:aa:4f:01:3a:c2:79:5e:30:3f:70:75:f5:83:ae:
1c:d5:60:4f:75:3d:52:21:9e:29:df:51:0d:9c:d9:80:d9:d2:
23:04:56:7b:64:bb:0a:91:b1:f7:3f:ca:58:ee:1e:75:9d:c6:
2c:d8:0d:4e:e9:34:56:6b:74:d2:a3:8e:d8:dc:1b:a0:25:0c:
71:0c:06:4c:bb:f8:e7:f7:e2:24:a1:ef:2e:28:9d:10:d0:65:
79:3c:65:36:e7:a1:44:f5:7a:b7:cc:20:0c:e5:06:65:2e:34:
13:55:e1:aa:c9:b8:36:41:b2:e4:eb:e4:02:01:90:6d:6f:27:
20:a1:10:30:c0:33:17:a7:27:13:6a:10:67:6d:c6:4c:ec:96:
d2:a8:28:d1:03:dc:cf:a1:77:8d:a2:68:bf:8a:b5:97:0a:18:
8b:8d:ed:64:ce:2c:9f:4b:30:ca:34:8d:bd:39:da:b7:9d:0c:
75:64:68:0a:34:fd:72:56:db:0b:d5:f1:bf:f5:e0:8d:a1:49:
1c:4a:dc:69:2f:56:66:0d:fb:20:60:33:f7:b9:6b:a8:86:05:
ba:56:e3:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org